@@ -2,9 +2,9 @@ name: Security Checks
22
33on :
44 push :
5- branches : [ main, develop ]
5+ branches : [main, develop]
66 pull_request :
7- branches : [ main ]
7+ branches : [main]
88 schedule :
99 - cron : ' 0 2 * * 0'
1010
@@ -14,31 +14,31 @@ jobs:
1414 runs-on : ubuntu-latest
1515
1616 steps :
17- - name : Checkout code
18- uses : actions/checkout@v4
19-
20- - name : Setup Node.js
21- uses : actions/setup-node@v4
22- with :
23- node-version : ' 20.19.0'
24- cache : ' npm'
25-
26- - name : Cleanup workspace
27- run : rm -rf node_modules frontend/node_modules backend/node_modules
17+ - name : Checkout code
18+ uses : actions/checkout@v4
2819
29- - name : Install dependencies
30- env :
31- HUSKY : 0
32- run : npm ci
33-
34- - name : Run npm audit (production dependencies)
35- run : npm audit --omit=dev --audit-level=critical
36-
37- - name : Check for known vulnerabilities in frontend (production dependencies)
38- run : npm audit --workspace=frontend --omit=dev --audit-level=critical
39-
40- - name : Check for known vulnerabilities in backend (production dependencies)
41- run : npm audit --workspace=backend --omit=dev --audit-level=critical
20+ - name : Setup Node.js
21+ uses : actions/setup-node@v4
22+ with :
23+ node-version : ' 20.19.0'
24+ cache : ' npm'
25+
26+ - name : Cleanup workspace
27+ run : rm -rf node_modules frontend/node_modules backend/node_modules
28+
29+ - name : Install dependencies
30+ env :
31+ HUSKY : 0
32+ run : npm ci
33+
34+ - name : Run npm audit (production dependencies)
35+ run : npm audit --omit=dev --audit-level=critical
36+
37+ - name : Check for known vulnerabilities in frontend (production dependencies)
38+ run : npm audit --workspace=frontend --omit=dev --audit-level=critical
39+
40+ - name : Check for known vulnerabilities in backend (production dependencies)
41+ run : npm audit --workspace=backend --omit=dev --audit-level=critical
4242
4343 codeql-analysis :
4444 name : CodeQL Analysis
@@ -51,19 +51,19 @@ jobs:
5151 strategy :
5252 fail-fast : false
5353 matrix :
54- language : [ 'javascript', 'typescript' ]
54+ language : ['javascript', 'typescript']
5555
5656 steps :
57- - name : Checkout repository
58- uses : actions/checkout@v4
59-
60- - name : Initialize CodeQL
61- uses : github/codeql-action/init@v3
62- with :
63- languages : ${{ matrix.language }}
64-
65- - name : Autobuild
66- uses : github/codeql-action/autobuild@v3
67-
68- - name : Perform CodeQL Analysis
69- uses : github/codeql-action/analyze@v3
57+ - name : Checkout repository
58+ uses : actions/checkout@v4
59+
60+ - name : Initialize CodeQL
61+ uses : github/codeql-action/init@v3
62+ with :
63+ languages : ${{ matrix.language }}
64+
65+ - name : Autobuild
66+ uses : github/codeql-action/autobuild@v3
67+
68+ - name : Perform CodeQL Analysis
69+ uses : github/codeql-action/analyze@v3
0 commit comments